CVE-2022-36380

Intel NUC Kit Wireless Adapter driver installer for Windows 10 before 22.40 contains an uncontrolled search path vulnerability (CVE-2022-36380) that could allow an authenticated local attacker to escalate privileges. The root cause is insecure path handling in the installer. Affected products inc...

CVE-2022-36400

Path traversal in the installer software for some Intelr NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36400

Path traversal in the installer software for some Intelr NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36400

This CVE affects Intel NUC Kit Wireless Adapter driver installer for Windows 10 prior to version 22.40. The issue is a path traversal vulnerability in the installer software that may allow an authenticated local user to escalate privileges. Affected products include various Intel NUC kits/boards ...

CVE-2022-36384

CVE-2022-36384 involves an unquoted search path in the Intel NUC Kit Wireless Adapter driver installer for Windows 10 prior to 22.40, potentially enabling local privilege escalation for an authenticated user. Affected products listed by Intel include various Intel NUC Kits/Boards (e.g., NUC8CCHKR...

PT-2022-23352 · Intel +1 · Intel Nuc Kit Wireless Adapter Drivers +1

Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue concerns path traversal in the installer software, potentially allowing an authenticated user to enable escalation of privilege via local...

Intel System Studio 代码问题漏洞

Intel System Studio is a versatile, cross-platform tool suite from Intel Corporation. It is designed to simplify system startup and improve the performance of system and IoT device applications on Intel platforms. A security vulnerability exists in Intel System Studio, which originates from an...

PT-2022-10199 · Intel · Intel System Studio

Name of the Vulnerable Software and Affected Versions: IntelR System Studio affected versions not specified Description: The issue is related to an uncontrolled search path in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2022-23343 · Intel · Intel Nuc Kit Wireless Adapter Drivers

Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to an unquoted search path in the installer software for some Intel NUC Kit Wireless Adapter drivers. This may allow an...

PT-2022-23340 · Intel · Intel Nuc Kit Wireless Adapter Drivers

Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to an uncontrolled search path in the installer software for some Intel NUC Kit Wireless Adapter drivers. This may allow an...

coreos-installer bug fix and enhancement update

An update is available for coreos-installer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Researchers Detail New Malware Campaign Targeting Indian Government Employees

The Transparent Tribe threat actor has been linked to a new campaign aimed at Indian government organizations with trojanized versions of a two-factor authentication solution called Kavach. "This group abuses Google advertisements for the purpose of malvertising to distribute backdoored versions ...

The vulnerability of the installation file of the Kaspersky Endpoint Security antivirus software and the Kavremover utility allows a malicious actor to execute an external executable file from within the installation process.

The vulnerability of the installation file of Kaspersky Endpoint Security and the Kavremover utility is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a malicious actor to execute an external executable file from within the installation process...

The vulnerability of the installation file of Kaspersky Endpoint Security and the Kavremover utility allows a malicious actor to execute the executable file instead of the uninstaller.

The vulnerability of the installation file of Kaspersky Endpoint Security and the Kavremover utility is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a malicious individual to execute the executable file instead of the uninstaller, which is...

The vulnerability arises from the implementation of the `msiexec.exe /fa c:\windows\installer[XXXXX].msi` command, which is used by the Windows Installer installer for the Juniper Identity Management Service. This allows a malicious individual to escalate their privileges.

The vulnerability of the msiexec.exe /fa c:\windows\installer\XXXXX.msi command for installing the Windows Installer’s Juniper Identity Management Service lies in the creation of temporary files with insecure permissions in the %TEMP% directory. Exploiting this vulnerability can allow an attacker...

ASB-A-243924784

In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-27784

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

CVE-2021-27784

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

Design/Logic Flaw

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

CVE-2021-27784 HCL Launch container images may contain non-unique https certificates and database encryption key

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...